Should be the first one, unless the rules are being bent for narrative convenience. It could also be an indication that the attack would have hit if the target were evil, and he's just neutral or something.